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Top Stories 

• Federal prosecutors charged Pacific Gas & Electric Co., April 1 with 12 felony violations 
of federal pipeline safety laws relating to a natural gas pipeline that ruptured, caused a fire, 
and destroyed 38 homes in San Bruno, California, in 2010. - Associated Press (See item 1) 

• Chrysler announced a recall April 2 for around 644,000 model year 201 1-2014 Jeep Grand 
Cherokee and Dodge Durango vehicles in the U.S. due to a potential brake booster issue. - 
New York Times (See item 6) 

• Indiana transportation officials were forced to close U.S. 52 between Brookville and Cedar 
Grove for several weeks starting April 2 for emergency repairs after rapid deterioration of 
roadside slopes. - Associated Press (See item 9 ) 

• Officials are investigating the cause of an April 1 fire at a 151-unit apartment building 
under construction in Rockville, Maryland, that caused estimated damages of upwards of 
$20 million. - WJLA 7 Washington D.C. (See item 34 ) 
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Energy Sector 



1. April 2, Associated Press - (California) PG&E criminally charged in fatal pipeline 
blast. Federal prosecutors charged Pacific Gas & Electric Co., April 1 with 12 felony 
violations of federal pipeline safety laws, alleging that the company knowingly relied 
on erroneous and incomplete information when assessing the safety of a natural gas 
pipeline that ruptured, caused a fire, and destroyed 38 homes in San Bruno in 2010. 
Source: http://news.msn.com/crime-iustice/pgande-criminally-charged-in-fatal- 
pipeline -blast 

2. April 1, WKOW 27 Madison - (Wisconsin) Badger State Ethanol doesn’t expect 
production delay after early morning fire. Badger State Ethanol LLC officials stated 
that production should resume April 3 at its ethanol plant in Monroe after a fire broke 
out April 1 during routine maintenance work. 

Source: http://www.wrex.com/story/25126161/2014/04/01/multiple-crews-on-scene-of- 
fire-at-monroe-ethanol-plant 

3. April 1, Associated Press; KGW 8 Portland - (Washington) Gas tank still leaking at 
Wash. LNG blast site. Access to the Williams Northwest Pipeline facility in Plymouth 
remained restricted and an evacuation order was lifted April 1 while gas continued 
leaking after an explosion March 31 that injured 5 workers. The fire burned itself out 
while investigators continued to assess the damage and determine what caused the 
blast. 

Source: http://www.kgw.com/news/Investigators-at-LNG-blast-site-evacuation-area- 
shrinks-25339695 1 .html 
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Chemical Industry Sector 

4. April 1, Columbia County News-Times - (Georgia) Crews put out chemical fire at 
Mullins Crossing. HAZMAT crews responded April 1 after a chemical fire broke out 
in a semi-truck hauling corrosive materials, causing the driver to pull into an empty 
area of the Mullins Crossing shopping center parking lot in Columbia County, Georgia. 
Several stores were evacuated as a precaution while crews spent 3 hours extinguishing 
the fire. 

Source: http://beta.mirror.augusta.corn/news/crime-courts/2014-04-01/crews-put-out- 
chemical-fire-mullins-crossing 
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Nuclear Reactors, Materials, and Waste Sector 

5. March 31, St. Louis Public Radio - (Missouri) EPA Analysis: Neighbors could be at 
risk if landfill fire reaches radioactive waste in Bridgeton. The U.S. Environmental 
Protection Agency (EPA) released their evaluation of a January report on what issues 
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could arise if an underground fire at the Bridgeton landfill adjacent to the West Lake 
Superfund Site reached radioactive materials buried there. The report outlined possible 
threats and the EPA stated that they are preparing to take steps to deal with those 
issues. 

Source: http://news.stlpublicradio.org/post/epa-analvsis-neighbors-could-be-risk-if- 
landfill-fire-reaches-radioactive-waste-bridgeton 
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Critical Manufacturing Sector 

6. April 2, New York Times - (International) Chrysler recalls over 850,000 S.U.V.s. 
Chrysler announced a recall April 2 for over 850,000 model year 2011-2014 Jeep 
Grand Cherokee and Dodge Durango vehicles, around 644,000 located in the U.S., due 
to the potential for water to enter the vehicles’ brake boosters or a loss of vacuum that 
could make braking more difficult. 

Source: http://www.nvtimes.com/2014/04/03/automobiles/chrysler-recalls-over- 
850000-suvs.html 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

7. April 1, KGW 8 Portland - (Oregon) Duo arrested in Portland for fake credit cards. 
Two Florida men were arrested at the Portland International Airport March 29 after 
they were suspected of using counterfeit payment cards at several retailers in the area. 
The suspects were found with around 100 fraudulent payment cards in their possession, 
as well as $10,000 in gift cards, cash, and merchandise. 

Source: http://www.kgw.com/news/Duo-accused-of-using-counterfeit-credit-cards-in- 
Portland-25343037 1 .html 

8. April 1, KSL 5 Salt Lake City - (Utah) ‘Ski Bum Bandit’ arrested for serial bank 
robberies, police say. A suspect known as the “Ski Bum Bandit” was arrested March 
31 in the Kaysville area and is suspected of robbing five banks in Salt Lake County. 
Source: http://www.ksl.com/7sidA292989 17&nid=148 
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Transportation Systems Sector 



9. April 2, Associated Press - (Indiana) Sinking highway in SE Indiana prompts 
closure. Indiana transportation officials were forced to close U.S. 52 between 
Brookville and Cedar Grove for several weeks starting April 2 for emergency repairs 
after rapid deterioration of roadside slopes caused the pavement to sink up to 5 inches 
in some spots. 

Source: http://www.seattlcpi.com/ncws/articlc/Sinking-highway-in-SE-lndiana- 
prompts-closure-5369700.php 

10. April 2, KNBC 4 Los Angeles - (California) Eastbound 210 Freeway reopens in 
Pasadena after big rig crash. All lanes of the 210 Freeway in Pasadena were closed 
for about 5 hours April 2 when 3 semi-trucks and a passenger vehicle were involved in 
3 separate crashes that hospitalized 2 people. 

Source: http://www.nbclosangeles.com/news/local/Eastbound-210-Closed-in-Pasadena- 
Due-to-Big-Rig-Crash-253538321.html 

11. April 1, KFDA 10 Amarillo - (Texas) FM 228 shut down Tuesday due to train 
derailment. FM 228, a major road in Amarillo, was closed several hours April 1 after a 
privately-owned train repair company’s train derailed. 

Source: http://www.newschannell0.com/story/25129944/fm-228-shut-down-tuesdav- 
due-to-train-derailment 
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Food and Agriculture Sector 

12. April 2, WX11 12 Winston-Salem - (Virginia) Cause of sickness at Virginia Produce 
in Hillsville still a mystery. Crews are investigating after 63 Virginia Produce workers 
at a Hillsville, Virginia facility were taken to area hospitals April 1 for what was 
initially believed to be carbon monoxide poisoning, which air quality tests later proved 
false. Officials allowed the company to resume operations after several hours, and 
announced April 2 that the produce inside the plant was safe for shipment. 

Source: http://www.wxiil2.com/news/gas-leak-reported-at-virginia-produce-in- 
hillsville/25268636 



13. April 1, U.S. Department of Agriculture - (National) Oklahoma firm recalls chicken 
products due to misbranding and undeclared allergens. The Food Safety and 
Inspection Service announced April 1 that AdvancePierre Foods of Enid, Oklahoma, 
recalled approximately 8,730 pounds of frozen chicken breast products due to 
misbranding and undeclared milk and soy. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-ai'chive/archi ve/20 1 4/recall-0 19-201 4-release 
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Water and Wastewater Systems Sector 



14. April 1, Wavy 10 Portsmouth - (Virginia) Water main break causes flooding in 
Portsmouth. A residential area including an apartment complex for the elderly in 
Portsmouth, Virginia, was flooded April 1 when a water main broke near a Norfolk 
pumping station, causing water to flood 6 to 12 inches deep in some areas. 

Source: http://wavy.com/2014/04/01/water-main-break-causes-flooding-in-portsmouth/ 

15. March 31, San Luis Obispo Tribune - (California) Water main break in SLO is fixed. 
About 300 residents of San Luis Obispo were without water for nearly 15 hours March 
31 after a 16-inch water main broke at an intersection. 

Source: http://www.sanluisobispo.com/2014/03/31/2998649/water-main-break-closes- 
intersection.html 
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Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

16. April 2, Associated Press - (Missouri) 23 students injured in school bus accident. A 
school bus carrying students from Highland Elementary and Highland High schools 
from the Lewis County C-l District overturned in a ditch in Ewing April 1, leaving 23 
students injured. 

Source: http://www.semissourian.com/storv/2066104.html 

17. April 2, Wilkes-Barre Citizens ’ Voice - (Pennsylvania) 3 students injured when 
school van slides off road. A Montgomery Avenue Elementary School van driver lost 
control of their vehicle April 1 on Route 92, swerved off the roadway, and crashed into 
several parked cars in West Pittston, leaving 3 students with minor injuries. 

Source: http://citizensvoice.com/news/3-students-iniured-when-school-van-slides-off- 
road-1.1661 126 

18. April 2, Columbus Dispatch - (Ohio) Water main break forces closure of Whetstone 
High School. Classes were cancelled April 2 at Whetstone High School in Columbus 
after a 12-inch water main break cut off water at the school. Crews responded to the 
scene to repair the broken line. 

Source: http://www.dispatch.com/content/stories/local/2014/04/02/Whetstone-High- 
School-closed-because-of-neighborhood-water-main-break.html 

19. April 1, Billings Gazette - (Montana) Malta High cancels school Wednesday after 
bomb threat. Malta High School in Montana cancelled classes April 2 due to a bomb 
threat, and officials reported that classes should resume April 3. 
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Source: http://billingsgazette.com/news/state-and-regional/montana/malta-high- 
cancels-school-wednesday-after-bomb-threat/article 9c785279-fd98-5382-943c- 
flb85 lbea9dc.html 

20. April 1, Topeka Capital- Journal - (Kansas) Cyber attacks paralyze state math and 
reading tests. The Kansas Department of Education confirmed April 1 that attackers 
began using distributed denial of service (DDoS) attacks March 27 targeting the State’s 
testing platform operated by the University of Kansas’ Center for Educational Testing 
and Evaluation in order to hinder annual math and reading tests. Testing was 
temporarily put on hold while authorities worked to mitigate another DDoS attack. 
Source: http://cionline.com/news/2014-04-01/cvber-attacks-paralyze-state-math-and- 
reading-tests 
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Emergency Services Sector 

21. April 1, Albany Times Union - (New York) Saratoga County 911 lines restored. The 
Saratoga County Sheriffs Office reported that five of the county’s emergency 9-1-1 
lines and phone numbers serving the county’s Department of Public Works garage and 
animal shelter were restored April 1 after suffering an outage caused by a wet cable in 
Milton March 30. 

Source: http://www.timesunion.com/local/article/Saratoga-County-91 1-lines-restored- 
5368372.php 
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Information Technology Sector 

22. April 2, Help Net Security - (International) Passwords, messages of 158k+ Boxee.tv 
users leaked. Attackers compromised the forum database for Web TV service Boxee.tv 
and posted the private information for over 158,000 users. The breach and subsequent 
leak contain email addresses, encrypted passwords, dates of birth, message histories, IP 
addresses, and other information. 

Source: http://www.net-securitv.org/secworld.php7kU 16621 

23. April 2, Softpedia - (International) Cybercriminals abuse security camera recorders 
and routers to mine for Bitcoins. A researcher at the SANS Technology Institute 
identified malware designed to infect security camera recorders and routers and use the 
devices to attempt to mine Bitcoin virtual currency. The malware is designed to run on 
ARM infrastructure and was spotted on Hikvision DVRs, which have a simple default 
root password that users often do not change. 

Source: http://news.softpedia.com/news/Cvbercriminals-Abuse-Security-Camera- 
Recorders-and-Routers-to-Mine-for-Bitcoins-435427.shtml 

24. April 2, Help Net Security - (International) Apple releases Safari 7.0.3, fixes security. 
Apple released version 7.0.3 of its Safari browser, fixing several security issues and 
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adding compatibility and stability improvements. 

Source: http://www.net-security.org/secworld.php7idM6620 



25. April 2, Softpedia - (International) SellHack deactivates plugin after cease and desist 
letter from Linkedln. The makers of the SellHack browser plugin, which uses 
publicly visible data to help users obtain hidden email addresses of Linkedln users, 
deactivated the plugin April 1 following a cease-and-desist letter from Linkedln. 

Source: http://news.softpedia.com/news/SellHack-Deactivates-Plugin-After-Cease-and- 
Desist-Letter-from-LinkedIn-435315.shtml 



26. April 2, Softpedia - (International) Oculus VR finds SQL injection flaw, asks 
Developer Center users to change passwords. Oculus VR advised users of its Oculus 
Developer Center to change their passwords as a precaution after the company 
identified a SQL injection vulnerability. The company reported that there was no 
indication that the vulnerability had been exploited. 

Source: http://news.softpedia.com/news/Oculus-VR-Finds-SQL-Iniection-Flaw-Asks- 
Developer-Center-Users-to-Change-Passwords-435302.shtml 

27. April 1, The Register - (International) Password bug lets me see shoppers’ credit 
cards in eBay ProStores, claims infosec bod. A security researcher from Securatary 
disclosed March 20 that he identified a vulnerability in eBay’s ProStores shops that 
could have allowed attackers to credit themselves with gift cards for ProStores and 
obtain customer payment card information. The vulnerability was reported in February 
and later fixed by eBay. 

Source: http://www.theregister.co.uk/2014/04/01/ebay stores vuln/ 

28. April 1, The Register - (International) Hotmail-gate: Windows 8 code leaker pleads 
guilty to theft of trade secrets. A former Microsoft employee pleaded guilty March 3 1 
to stealing company trade secrets for sending unreleased updates for the RT operating 
system as well as a copy of the Microsoft Activation Server Software Development Kit 
to a blogger. 

Source: http://www.theregister.co.uk/2014/04/01/kibkalo guilty plea/ 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



29. April 1, Clarksville Leaf-Chronicle - (Tennessee) CDE Internet, phone service 
restored; thousands without service nearly nine hours. More than 11,000 Internet 
subscribers and 3,000 phone customers of CDE Lightband Communications in 
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Clarksville lost service for nearly 9 hours April 1 for unknown reasons, according to a 
CDE spokesperson. 

Source: 

http://www.theleafchronicle.com/article/20 1 4040 1/NEWSO 1/3040 1 0023/Intemet- 
phones-still-out-for-thousands-of-CDE-customers-as-night-falls 
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Commercial Facilities Sector 

30. April 1, Washington Post - (New York) ‘Small gas leaks’ found near site of Harlem 
building explosion. The U.S. National Transportation Safety Board released a 
preliminary report about a March 12 explosion that collapsed 2 apartment buildings in 
the Harlem area of New York City and left 8 people dead and dozens more injured. The 
new report states that leak testing found an unspecified number of small gas leaks 
below the pavement. 

Source: http://www.washingtonpost.com/news/post-nation/wp/2014/04/01/small-gas- 
leaks-found-near-site-of-harlem-building-explosion/ 

31. April 1, WPVI 6 Philadelphia - (Pennsylvania) 4 hospitalized in carbon monoxide 
incident at Starbucks in Horsham. Construction workers working in a vacant 
storefront inadvertently caused a carbon monoxide leak at a nearby Starbucks in 
Horsham April 1. Two Starbucks employees and 2 patrons were hospitalized, while 5 
others were treated at the scene. 

Source: http://abclocal.go.com/wpvi/story?section=news/local&id=9488133 

32. April 1, Long Island Newsday - (New York) Fire marshal: Blaze that destroyed 
Island Recreational not suspicious. Fire officials announced April 1 that a fire at a 
strip mall in North Massapequa March 31 was deemed not suspicious, and that 
authorities continued to perform air and water quality tests. The fire destroyed one store 
and damaged three other businesses, while prompting the evacuation of the entire strip 
mall. 

Source: http://www.newsday.com/long-island/nassau/fire-marshal-blaze-that- 
destroyed-island-recreational-not-suspicious- 1.7574834 

33. April 1, WCAU 10 Philadelphia - (Pennsylvania) Baking soda in envelope causes 
office evacuation. A MetaSource office building in Bristol, Pennsylvania, was 
evacuated for several hours April 1 after an employee came in contact with a suspicious 
white powder while opening the mail that was later determined to be baking soda. 
HAZMAT crews responded and cleared the scene after determining there was no 
threat. 

Source: http://www.nbcphiladelphia.com/news/breaking/White-Powder-Bristol- 
253371711.html 



34. April 1, WJLA 7 Washington, D.C. - (Maryland) Rockville three-alarm fire burns 
unfinished apartment complex. Officials are investigating the cause of an April 1 fire 
at a 151-unit apartment building under construction in Rockville that prompted a 
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response from more than 200 firefighters. Damage estimates could reach upwards of 
$20 million. 

Source: http://www.wila.com/articles/2014/04/rockville-two-alarm-fire-burning- 
unfinished-apartment-complex- 1017 17.html 

35. March 31, Associated Press - (Indiana) Firm fined $50,000 in Indiana State Fair 
collapse. The Indiana Department of Labor announced March 3 1 that Mid- America 
Sound Corp., of Greenfield was fined $50,000 for safety violations related to a stage 
collapse at the Indiana State Fair in 201 1 that killed 7 people and injured more than 40 
others. 

Source: http://www.wlwt.com/news/firm-fined-5000Q-in-indiana-state-fair- 
collapse/25258070 

For additional stories, see items 4 and 14 
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Dams Sector 



Nothing to report 



[ Return to top ] 




NTAS 

A^viwfT 

NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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